This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json) Hash identifier: Ksguvc5cnxPXqAtD0mAajfGxu7psb5xJPOhFMZMNAUA= Subject key identifier: CE:A7:1F:1B:23:F3:BA:7A:F8:0B:30:CD:5C:9D:80:85:34:78:8C:C0 Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Certificate serial: 019C4321E35781B244ECE2BFE0A9F38CA224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft Manifest number: 13B0 Signing time: Mon 09 Feb 2026 16:00:20 +0000 Manifest this update: Mon 09 Feb 2026 16:00:20 +0000 Manifest next update: Tue 10 Feb 2026 16:00:20 +0000 Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=) 2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: L3PJDtbMk7+KKGwlNaFIIbveUMu6rsPuDDswPvbvUAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e3:57:81:b2:44:ec:e2:bf:e0:a9:f3:8c:a2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Validity Not Before: Feb 9 16:00:20 2026 GMT Not After : Feb 10 16:00:20 2026 GMT Subject: CN=cea71f1b23f3ba7af80b30cd5c9d808534788cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:c0:dd:c6:60:67:ef:23:8e:1b:b4:12:14: 47:78:e6:90:cc:8e:d0:b2:96:5b:a8:5c:08:67:c0: 77:01:5b:a4:c9:d7:73:ff:6f:d7:ea:46:39:6f:7e: 3e:60:ca:6f:1c:ec:52:01:96:5e:e6:88:6f:79:ae: 51:78:17:58:79:2e:eb:dd:15:0b:dd:11:fe:f7:dd: 6a:1a:62:7e:f6:7b:ea:50:26:34:1c:8e:3a:46:70: 29:fb:db:8f:d4:40:cd:8b:c2:39:1d:45:ed:05:ab: e0:49:a6:7f:9d:ac:c9:45:c1:22:28:6b:18:f4:59: fa:f7:87:99:ea:cd:6d:28:09:0b:9a:7c:16:a8:df: 11:3f:1f:9e:ca:e6:73:11:a7:ba:97:06:a7:f4:87: ba:09:17:d6:ff:37:50:ca:f6:8f:0e:a9:b0:cd:37: 03:d8:f6:9a:d2:7c:dd:e7:83:44:c7:7b:02:7d:bc: a6:58:d4:d7:48:37:dc:8d:24:1d:6e:ab:1b:71:9e: 49:59:22:33:85:ae:b1:61:b2:eb:29:fb:04:b1:a0: b2:45:93:b4:d8:a7:82:71:02:e3:ca:62:2f:ac:ef: 9d:7e:43:2e:79:4c:d0:f1:84:cc:11:6e:2f:e3:c7: cb:95:0b:25:39:cf:28:49:64:6f:35:9e:79:2f:52: 5a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A7:1F:1B:23:F3:BA:7A:F8:0B:30:CD:5C:9D:80:85:34:78:8C:C0 X509v3 Authority Key Identifier: keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:11:3c:fb:07:cb:84:30:b1:08:07:53:dc:7a:d6:78:58:07: 93:5c:eb:aa:35:37:26:b0:e1:54:09:5f:cf:ea:58:e8:ca:32: e3:81:0b:06:7e:87:94:ae:4a:2d:f8:d4:71:a9:e9:3e:68:64: d5:ba:a7:fc:3d:99:0d:ab:59:c7:58:71:cc:95:a0:82:7c:7c: 0d:61:51:d7:9c:94:49:e1:8d:75:f8:62:29:d3:ed:a8:a3:29: 0f:3e:ca:08:2f:e2:94:0e:bf:26:e2:03:c9:35:25:96:97:99: 4e:78:63:f4:8f:7a:e2:6a:47:10:a3:7e:6c:be:9e:4b:28:1a: 1b:c0:fa:b2:b9:80:15:3a:c9:41:0f:40:bf:18:00:9e:bf:c9: f5:ec:cd:21:5e:df:ca:4d:53:69:60:70:2d:39:8b:30:f6:54: 87:76:e5:a0:aa:a5:5f:70:2d:5d:33:b5:4e:6d:1b:b4:0a:8f: c1:36:7a:2e:35:51:96:51:d2:43:08:55:a5:b5:70:79:15:d0: 4c:dd:6d:32:a3:9a:66:8a:46:29:ed:a3:b9:d0:d4:25:4f:c5: e2:d2:0c:69:37:d5:c1:db:c9:ef:02:b6:7b:aa:9c:e3:98:ee: ad:d3:ca:b5:e8:4c:e2:dd:c3:ee:be:3c:f2:72:4f:bd:ee:1c: fc:cf:5e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeNXgbJE7OK/4KnzjKIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2 ZTJmMDgwHhcNMjYwMjA5MTYwMDIwWhcNMjYwMjEwMTYwMDIwWjAzMTEwLwYDVQQD EyhjZWE3MWYxYjIzZjNiYTdhZjgwYjMwY2Q1YzlkODA4NTM0Nzg4Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDbA3cZgZ+8jjhu0EhRHeOaQzI7Q spZbqFwIZ8B3AVukyddz/2/X6kY5b34+YMpvHOxSAZZe5ohvea5ReBdYeS7r3RUL 3RH+991qGmJ+9nvqUCY0HI46RnAp+9uP1EDNi8I5HUXtBavgSaZ/nazJRcEiKGsY 9Fn694eZ6s1tKAkLmnwWqN8RPx+eyuZzEae6lwan9Ie6CRfW/zdQyvaPDqmwzTcD 2Paa0nzd54NEx3sCfbymWNTXSDfcjSQdbqsbcZ5JWSIzha6xYbLrKfsEsaCyRZO0 2KeCcQLjymIvrO+dfkMueUzQ8YTMEW4v48fLlQslOc8oSWRvNZ55L1JamQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6nHxsj87p6+AswzVydgIU0eIzAMB8GA1UdIwQY MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt NDU3OWEzOGY2ZDA4LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4 LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBE8+wfL hDCxCAdT3HrWeFgHk1zrqjU3JrDhVAlfz+pY6Moy44ELBn6HlK5KLfjUcanpPmhk 1bqn/D2ZDatZx1hxzJWggnx8DWFR15yUSeGNdfhiKdPtqKMpDz7KCC/ilA6/JuID yTUllpeZTnhj9I964mpHEKN+bL6eSygaG8D6srmAFTrJQQ9AvxgAnr/J9ezNIV7f yk1TaWBwLTmLMPZUh3bloKqlX3AtXTO1Tm0btAqPwTZ6LjVRllHSQwhVpbVweRXQ TN1tMqOaZopGKe2judDUJU/F4tIMaTfVwdvJ7wK2e6qc45jurdPKtehM4t3D7r48 8nJPve4c/M9eNA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:00:23 2026 by rpki-client